$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: 6UMRS1r9O1B2mi7UPidt2yQuTcFLPdWZbQjlQkisBWY= Subject key identifier: 9D:EF:D5:D9:63:8E:AD:9F:B0:26:5B:C9:3C:8F:61:69:D3:F6:05:1C Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0B93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0B72 Signing time: Thu 16 Apr 2026 19:08:41 +0000 Manifest this update: Thu 16 Apr 2026 19:08:40 +0000 Manifest next update: Thu 23 Apr 2026 19:08:40 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: wNcjqAgfLe5rC0M1NssgawTqJfv8cFRdgJRPLyf/SJM=) 2: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: wATgHFFEBhvghT6gMqTJTC0PonsBt+Ml1sqdhxwQAPg=) 3: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: OLS2n2bCipeK2cJAKKmNcGHacmpb1F1CGfou3xcKoRw=) 4: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: Qrs9ea1Ryt4mplsCkDhjHp70Ezhx/br174uLvjICktg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2963 (0xb93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Apr 16 19:08:40 2026 GMT Not After : Apr 23 19:08:40 2026 GMT Subject: CN=69e133b9-9155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:08:08:de:09:22:2d:22:a5:e1:28:a4:dd:52: fe:6a:f8:36:0b:72:5c:f2:a4:3a:06:5c:2d:71:60: be:2f:62:78:24:40:ee:30:bb:55:64:66:09:57:76: 62:63:5e:ad:27:25:4d:e5:e6:2f:93:e7:40:15:32: a3:d1:5f:68:25:a8:73:26:a0:2e:3b:84:4a:91:1a: 11:aa:a2:f6:c6:d5:6f:2c:37:16:70:11:b9:99:09: 55:d2:8f:b5:b3:a0:30:26:28:6e:20:df:32:6e:32: 9d:32:82:9b:28:44:c5:c7:41:af:75:3a:e4:06:f4: 34:0d:b3:bd:97:36:2f:c6:6b:7d:a8:ec:52:89:a2: 09:92:1f:ec:4e:97:95:2f:a1:03:e8:c1:08:34:8c: 70:28:e8:ed:2b:6f:fb:c3:f0:2a:d6:87:21:3e:ab: 50:1e:83:87:5d:5a:08:4b:10:aa:83:ff:b9:02:8d: 41:00:93:5a:0c:a5:ba:ad:98:c4:a9:ad:a7:3d:27: 51:2a:e4:e9:12:ef:4f:c8:e6:ae:10:a0:09:f9:34: 9f:cd:ca:ad:67:19:71:a6:fe:b7:e3:f6:3f:64:43: 3e:3b:59:56:6f:e7:95:3d:cf:23:6b:da:89:5e:43: b1:9f:a2:3f:99:d2:1c:35:74:98:ef:4c:fb:20:e7: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EF:D5:D9:63:8E:AD:9F:B0:26:5B:C9:3C:8F:61:69:D3:F6:05:1C X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:98:5b:3a:b7:e1:7e:d0:9a:33:25:59:8a:68:22:b4:d0:03: 46:c7:3d:08:8d:1d:9b:09:d7:dd:10:4d:c8:d0:8c:57:6d:2c: 6c:5c:e3:12:91:4e:4a:47:b6:42:10:9f:fc:67:98:d7:c0:11: 80:5f:81:7d:16:de:68:99:81:30:44:64:3e:a0:f2:59:4a:91: bc:df:2e:2b:ff:04:7c:bb:e1:f0:80:1c:e8:c7:2e:58:7f:35: 29:26:a0:a1:cc:6a:b7:f9:8f:e9:44:5b:32:82:5a:63:f4:df: 5b:40:94:99:69:34:75:94:3a:cd:05:37:e1:ba:c4:7f:d0:e7: 78:ea:00:d7:f9:11:62:01:81:f3:09:d5:67:5d:5c:cc:6c:2a: e7:20:2d:71:7e:ec:a0:50:2a:78:68:df:d1:3f:f6:e8:af:de: 19:ef:e7:ce:53:24:f7:99:6d:6f:1f:41:9d:b9:73:da:5d:ca: 99:77:ae:71:b5:23:f1:ef:f8:48:96:0d:00:01:14:42:2f:92: 03:cf:e7:1f:07:eb:59:15:d7:6a:35:13:ad:ea:1a:b4:26:5d: aa:21:54:f3:63:94:39:6f:63:06:aa:bf:e2:17:60:9f:b3:cf: a1:1e:d7:ea:ef:e7:30:44:f5:87:d3:b0:1e:66:5d:09:6f:e1: 50:64:a0:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjYwNDE2MTkwODQwWhcNMjYwNDIzMTkwODQwWjAYMRYwFAYD VQQDEw02OWUxMzNiOS05MTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQgI3gkiLSKl4Sik3VL+avg2C3Jc8qQ6BlwtcWC+L2J4JEDuMLtVZGYJV3Zi Y16tJyVN5eYvk+dAFTKj0V9oJahzJqAuO4RKkRoRqqL2xtVvLDcWcBG5mQlV0o+1 s6AwJihuIN8ybjKdMoKbKETFx0GvdTrkBvQ0DbO9lzYvxmt9qOxSiaIJkh/sTpeV L6ED6MEINIxwKOjtK2/7w/Aq1ochPqtQHoOHXVoISxCqg/+5Ao1BAJNaDKW6rZjE qa2nPSdRKuTpEu9PyOauEKAJ+TSfzcqtZxlxpv634/Y/ZEM+O1lWb+eVPc8ja9qJ XkOxn6I/mdIcNXSY70z7IOcSzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ3v1dlj jq2fsCZbyTyPYWnT9gUcMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3JhbOrfhftCaMyVZimgitNADRsc9CI0dmwnX3RBNyNCMV20sbFzjEpFOSke2 QhCf/GeY18ARgF+BfRbeaJmBMERkPqDyWUqRvN8uK/8EfLvh8IAc6McuWH81KSag ocxqt/mP6URbMoJaY/TfW0CUmWk0dZQ6zQU34brEf9DneOoA1/kRYgGB8wnVZ11c zGwq5yAtcX7soFAqeGjf0T/26K/eGe/nzlMk95ltbx9Bnblz2l3KmXeucbUj8e/4 SJYNAAEUQi+SA8/nHwfrWRXXajUTreoatCZdqiFU82OUOW9jBqq/4hdgn7PPoR7X 6u/nMET1h9OwHmZdCW/hUGSgHQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:37 2026 by rpki-client